Patch management, Vulnerability management

The new update for Java will close 40 security vulnerabilities

Dan KaplanJune 17, 2013

Oracle is planning to fix 40 security vulnerabilities when it releases its Critical Patch Update for Java SE on Tuesday.

All but three of the holes being plugged can be remotely exploited without authentication.

"Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible," the company said in a pre-patch advisory.

Once the updates are released, they can be found here. Starting in October, Java updates will be released on a quarterly basis, instead of three times a year, as part of Oracle's main Critical Patch Update.

Dan Kaplan

Shot of a surgeon looking at a monitor in an operating room

Device Security

7 vulnerabilities patched in Axeda IIoT remote management tool, popular in medical sector

Joe UchillMarch 8, 2022

PTC sunset Axeda in 2019, but the industrial IoT remote monitoring and management agent is still in use in several systems. Based on Forescout telemetry, it is particularly popular in active use within the medical sector, particularly lab testing and imaging.

Claroty data finds medical device disclosures are on the rise, which is an important step to improving the sector’s posture. But Unit 42 research finds the majority of infusion pumps have not been patched, impeding that progress. (Photo by Buda Mendes/Getty Images)

Vulnerability management

Medical device disclosures on the rise, but providers struggle to patch known flaws

Jessica DavisMarch 3, 2022

Palo Alto Networks Unit 42 data shows the majority of infusion pumps are operating with known security vulnerabilities. As disclosures increase, the need for faster medical device security remediation follows.

Network outages and service disruptions have become a prevalent fallout from cyberattacks in healthcare. After the Kronos incident, providers must evaluate how to maintain business continuity. (Photo by Cate Gillon/Getty Images)

Ransomware

Ransomware anatomy: Dual cyberattacks on provider call for vulnerability review

Jessica DavisFebruary 28, 2022

Karma and Conti simultaneously hacked into a healthcare network via a known Microsoft Exchange vulnerability, Sophos research shows. The attack shares lessons learned for other providers.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

The new update for Java will close 40 security vulnerabilities

Related

7 vulnerabilities patched in Axeda IIoT remote management tool, popular in medical sector

Medical device disclosures on the rise, but providers struggle to patch known flaws

Ransomware anatomy: Dual cyberattacks on provider call for vulnerability review

Get daily email updates